Endpoint configuration · GraphQL enum

NftRegister enum

NftRegister represents a register within the nftables framework. Registers are temporary storage locations used by nftables rules to store and manipulate data during packet processing, such as extracted packet fields or computed values. Reference: nftables — Registers

Values

Enum Value Description

VERDICT

 Verdict register (NFT_REG_VERDICT); holds the rule verdict.

REG_1

 64-bit register 1 (NFT_REG_1).

REG_2

 64-bit register 2 (NFT_REG_2).

REG_3

 64-bit register 3 (NFT_REG_3).

REG_4

 64-bit register 4 (NFT_REG_4).

REG_MAX

 Maximum register value sentinel.

REG32_00

 32-bit register 0 (NFT_REG32_00).

REG32_01

 32-bit register 1 (NFT_REG32_01).

REG32_02

 32-bit register 2 (NFT_REG32_02).

REG32_03

 32-bit register 3 (NFT_REG32_03).

REG32_04

 32-bit register 4 (NFT_REG32_04).

REG32_05

 32-bit register 5 (NFT_REG32_05).

REG32_06

 32-bit register 6 (NFT_REG32_06).

REG32_07

 32-bit register 7 (NFT_REG32_07).

REG32_08

 32-bit register 8 (NFT_REG32_08).

REG32_09

 32-bit register 9 (NFT_REG32_09).

REG32_10

 32-bit register 10 (NFT_REG32_10).

REG32_11

 32-bit register 11 (NFT_REG32_11).

REG32_12

 32-bit register 12 (NFT_REG32_12).

REG32_13

 32-bit register 13 (NFT_REG32_13).

REG32_14

 32-bit register 14 (NFT_REG32_14).

REG32_15

 32-bit register 15 (NFT_REG32_15).

Used by

  • BitwiseExpression type: Perform bit-level operations (AND, OR, XOR, shifts) on packet data or metadata values.
  • ByteOrderExpression type: Convert values between network byte order (big-endian) and host byte order for correct comparisons and storage.
  • CmpExpression type: CmpExpression represents an nftables expression for comparing a value held in a register against a constant data value.
  • CtExpression type: Inspect or modify connection tracking (conntrack) state, such as connection state, marks, labels, addresses, or counters.
  • DupExpression type: Duplicate a packet to another address or device for mirroring or traffic analysis.
  • DynsetExpression type: Dynset represents an nftables dynamic set expression.
  • ExthdrExpression type: Exthdr represents an nftables expression for accessing or manipulating IPv6 extension headers, TCP options, or other protocol options.
  • FibExpression type: Fib represents an nftables expression for performing a Forwarding Information Base (FIB) lookup.
  • HashExpression type: Hash represents an nftables expression for computing a hash value from packet data.
  • ImmediateExpression type: Immediate represents an nftables expression that loads a constant, immediate value into a register.
  • LookupExpression type: Lookup represents an nftables expression for looking up a value in a set or map.
  • MasqExpression type: MasqExpression represents an nftables expression for masquerading, a form of Source NAT (SNAT).
  • MetaExpression type: MetaExpression represents an nftables expression for accessing meta-data about the packet, the network device, or the system context.
  • NatExpression type: NatExpression represents an nftables expression for performing Network Address Translation (NAT).
  • NumgenExpression type: NumgenExpression represents an nftables expression for generating numbers.
  • ObjRefExpression type: ObjRefExpression represents an nftables expression for referencing other objects (like sets, maps, or other named entities) within the nftables…
  • PayloadExpression type: PayloadExpression represents an nftables expression for accessing and manipulating packet payload data at various layers (link, network, transport).
  • QueueExpression type: QueueExpression represents an nftables expression for sending packets to a userspace queue.
  • RangeExpression type: RangeExpressions represents an nftables expression for matching a value within a specified range.
  • RedirExpression type: RedirExpression represents an nftables expression for redirecting packets.
  • RtExpression type: RtExpression represents an nftables expression for accessing routing (RT) information.
  • SocketExpression type: SocketExpression represents an nftables expression for querying information about the socket associated with a packet, if one exists.
  • TransparentProxyExpression type: TransparentProxyExpression represents an nftables expression for transparent proxying.

Example

Example

"VERDICT"